This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/ZT9LL1knJk98OWBBZzmpd3KjJfI.roa File: ZT9LL1knJk98OWBBZzmpd3KjJfI.roa (raw, json) Hash identifier: 4/mqEiUwgyohdOIIeiQwV1R7+uiHz+P83MCY26loH04= Subject key identifier: 65:3F:4B:2F:59:27:26:4F:7C:39:60:41:67:39:A9:77:72:A3:25:F2 Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Certificate serial: 019B7A5AC165E30DD70F520BC3AF078D3147 Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/ZT9LL1knJk98OWBBZzmpd3KjJfI.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215435 IP address blocks: 216.87.54.0/24 maxlen: 24 2001:678:204::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c1:65:e3:0d:d7:0f:52:0b:c3:af:07:8d:31:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=653f4b2f5927264f7c3960416739a97772a325f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ae:46:71:55:56:20:be:c5:da:6f:e9:55:48: c1:55:3f:50:df:6e:19:28:b3:a9:f0:41:94:59:c8: 80:5d:13:60:9b:9c:4b:a1:bc:b6:b7:33:3a:f1:fa: c3:4a:9d:4f:cf:c3:80:fa:cd:7e:8e:e2:62:17:2c: a9:6e:40:e2:16:d7:3b:6a:9c:45:29:bf:e4:f6:18: 30:20:9d:cc:5f:17:5c:ba:18:fe:8c:26:e2:78:25: 07:4d:b9:8b:b2:37:1f:14:c6:bd:95:32:d6:70:41: 08:92:79:bd:3b:5a:9d:23:fe:dd:6c:e7:21:2f:cb: b1:af:44:37:32:19:73:88:85:15:05:b7:0a:14:62: e6:be:2d:36:fc:e1:6b:cc:8e:f5:7e:00:03:b9:06: 2b:66:7d:8e:6f:d8:b5:fe:2f:82:9c:4a:23:24:39: 6f:c1:10:48:38:11:d2:60:59:53:7e:e4:bf:0c:6e: 1d:45:2b:31:7b:c0:16:7d:7a:f3:0e:2d:4f:ba:0d: 0a:34:77:e7:f1:7f:3a:6b:f3:69:12:92:5c:9b:ad: 1f:8c:ec:86:58:a6:46:3d:18:69:12:fd:a0:36:52: f7:0e:0a:81:90:88:8f:e2:44:9e:47:28:66:d0:13: f1:57:fc:84:8d:4c:5d:a4:50:bf:19:5f:4b:21:ad: 4b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3F:4B:2F:59:27:26:4F:7C:39:60:41:67:39:A9:77:72:A3:25:F2 X509v3 Authority Key Identifier: keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/ZT9LL1knJk98OWBBZzmpd3KjJfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.87.54.0/24 IPv6: 2001:678:204::/48 Signature Algorithm: sha256WithRSAEncryption 69:bd:0a:f6:a7:f5:9b:29:5f:6d:72:e3:94:a3:db:8e:7b:db: 92:9c:b1:c8:f6:65:ff:55:d9:2e:60:c2:5b:c8:c2:be:70:bd: da:2b:eb:21:bb:b4:0a:ef:2c:a4:fa:d5:ad:6a:76:79:82:d1: 98:ef:d4:e6:f4:2b:a2:6c:fb:5f:01:72:2e:fc:69:4e:57:f0: 30:77:f4:d9:5f:06:06:fe:e8:37:fb:b5:1e:6e:00:fa:15:bd: 4e:17:94:c7:7d:c8:9d:30:77:5e:e6:30:41:7e:6c:8c:c6:33: 17:8d:2a:4e:a1:37:43:71:d7:e2:07:17:e3:88:5f:55:0d:40: 9b:90:0e:97:f0:d0:0d:a8:a6:2d:0a:f7:77:c1:55:7a:22:be: 71:22:c8:1e:79:56:6a:7d:0b:8d:6f:7e:2a:89:78:d8:49:9d: ea:61:6f:8f:29:df:f6:9e:ec:22:cf:02:fd:c3:3f:0b:77:64: 05:af:bf:9e:7f:e5:61:54:a9:f5:c0:a4:a2:fa:f5:39:97:6d: 52:a9:1e:20:b0:e2:a9:7a:75:52:9b:5f:00:ae:7e:9c:b1:f5: ed:28:d2:f2:0d:40:78:47:a7:68:64:1f:0e:49:40:ef:e6:90: 76:f2:95:9c:0c:19:f5:f1:59:9d:f4:de:73:86:a7:69:48:91: 9c:64:8a:71 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WsFl4w3XD1ILw68HjTFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx ZTU3YzQwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTNmNGIyZjU5MjcyNjRmN2MzOTYwNDE2NzM5YTk3NzcyYTMyNWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K5GcVVWIL7F2m/pVUjBVT9Q324Z KLOp8EGUWciAXRNgm5xLoby2tzM68frDSp1Pz8OA+s1+juJiFyypbkDiFtc7apxF Kb/k9hgwIJ3MXxdcuhj+jCbieCUHTbmLsjcfFMa9lTLWcEEIknm9O1qdI/7dbOch L8uxr0Q3MhlziIUVBbcKFGLmvi02/OFrzI71fgADuQYrZn2Ob9i1/i+CnEojJDlv wRBIOBHSYFlTfuS/DG4dRSsxe8AWfXrzDi1Pug0KNHfn8X86a/NpEpJcm60fjOyG WKZGPRhpEv2gNlL3DgqBkIiP4kSeRyhm0BPxV/yEjUxdpFC/GV9LIa1LtwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGU/Sy9ZJyZPfDlgQWc5qXdyoyXyMB8GA1UdIwQY MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt YWI3ZjE0ZGFhZTRmLzEvWlQ5TEwxa25Kazk4T1dCQlp6bXBkM0tqSmZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTItYWI3ZjE0ZGFhZTRm LzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2Fc2MA8E AgACMAkDBwAgAQZ4AgQwDQYJKoZIhvcNAQELBQADggEBAGm9Cvan9ZspX21y45Sj 245725Kcscj2Zf9V2S5gwlvIwr5wvdor6yG7tArvLKT61a1qdnmC0Zjv1Ob0K6Js +18Bci78aU5X8DB39NlfBgb+6Df7tR5uAPoVvU4XlMd9yJ0wd17mMEF+bIzGMxeN Kk6hN0Nx1+IHF+OIX1UNQJuQDpfw0A2opi0K93fBVXoivnEiyB55Vmp9C41vfiqJ eNhJnephb48p3/ae7CLPAv3DPwt3ZAWvv55/5WFUqfXApKL69TmXbVKpHiCw4ql6 dVKbXwCufpyx9e0o0vINQHhHp2hkHw5JQO/mkHbylZwMGfXxWZ303nOGp2lIkZxk inE= -----END CERTIFICATE-----Generated at Wed Jan 21 12:46:25 2026 by rpki-client